diff --git a/.obsidian/workspace.json b/.obsidian/workspace.json
index 534666e..3af48b4 100644
--- a/.obsidian/workspace.json
+++ b/.obsidian/workspace.json
@@ -11,10 +11,14 @@
"id": "903b0393c447bf77",
"type": "leaf",
"state": {
- "type": "empty",
- "state": {},
+ "type": "markdown",
+ "state": {
+ "file": "tools/security/ssl-tls-web-security.md",
+ "mode": "source",
+ "source": false
+ },
"icon": "lucide-file",
- "title": "New tab"
+ "title": "ssl-tls-web-security"
}
}
]
@@ -190,11 +194,12 @@
"obsidian-git:Open Git source control": false
}
},
- "active": "f3f577dcf6ffe86c",
+ "active": "903b0393c447bf77",
"lastOpenFiles": [
+ "README.md",
+ "tools/security/ssl-tls-web-security.md",
"tools/security/Untitled.md",
"tools/security/pentest-recon-enum/web-dns-recon-tools.md",
- "README.md",
"tools/security/pentest-recon-enum/pentest-arsenal.md",
"tools/INDEX.md",
"SOP-Navigation-and-Layout.md",
@@ -204,7 +209,6 @@
"tools/security/pentest-recon-enum/Packet Capture & Analysis.md",
"tools/security/pentest-recon-enum/Recon & Threat Reputation.md",
"tools/security/pentest-recon-enum/Port Scanners & Network Discovery.md",
- "tools/security/ssl-tls-web-security.md",
"TOOL-TABLE-SCHEMA.md",
"tools/sysadmin-devops/terminal-shell-productivity/Terminal Emulators.md",
"tools/sysadmin-devops/terminal-shell-productivity/Files & Directories.md",
diff --git a/README.md b/README.md
index e658a94..dbe422b 100644
--- a/README.md
+++ b/README.md
@@ -90,24 +90,6 @@ When ready: Plan to squash-merge or rebase + clean history into main.
| Tool Table Format | Schema used in every tool list | [TOOL-TABLE-SCHEMA.md](./TOOL-TABLE-SCHEMA.md) |
All tool-list markdown files follow the structure and linking rules defined in [TOOL-TABLE-SCHEMA.md](./TOOL-TABLE-SCHEMA.md).
-##### :black_small_square: SSL
-
-
- openssl - is a robust, commercial-grade, and full-featured toolkit for the TLS and SSL protocols.
- gnutls-cli - client program to set up a TLS connection to some other computer.
- sslyze
- - fast and powerful SSL/TLS server scanning library.
- sslscan - tests SSL/TLS enabled services to discover supported cipher suites.
- testssl.sh - testing TLS/SSL encryption anywhere on any port.
- cipherscan - a very simple way to find out which SSL ciphersuites are supported by a target.
- spiped - is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses.
- Certbot - is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server.
- mkcert - simple zero-config tool to make locally trusted development certificates with any names you'd like.
- certstrap - tools to bootstrap CAs, certificate requests, and signed certificates.
- Sublert - is a security and reconnaissance tool to automatically monitor new subdomains.
- mkchain - open source tool to help you build a valid SSL certificate chain.
- ssl-cert-check - SSL Certification Expiration Checker.
-
##### :black_small_square: Security
diff --git a/tools/security/ssl-tls-web-security.md b/tools/security/ssl-tls-web-security.md
index 6965eeb..e981e08 100644
--- a/tools/security/ssl-tls-web-security.md
+++ b/tools/security/ssl-tls-web-security.md
@@ -1,16 +1,17 @@
# SSL/TLS & Web Security Tools
-Online scanners, analyzers, configuration generators, Certificate Transparency (CT) resources, testing/demo sites, and utilities for assessing and hardening web TLS/SSL configurations.
+Online scanners, analyzers, configuration generators, Certificate Transparency (CT) resources, testing/demo sites, and utilities for assessing and hardening web TLS/SSL configurations.
+Also includes offline/CLI scanners, clients, and certificate management tools.
-These tools help identify weak ciphers, protocol issues, certificate problems, CSP/HSTS misconfigurations, and more — essential for web pentesting, secure server setup, and compliance checks.
+These help identify weak ciphers, protocol issues, certificate problems, CSP/HSTS misconfigurations, and more — essential for web pentesting, secure server setup, and compliance.
[↑ Back to Security Tools INDEX](../_INDEX.md)
[↑ Back to Tools Overview](../../_INDEX.md)
-SSL/TLS Scanners & Analyzers
+SSL/TLS Scanners & Analyzers (Online)
-### SSL/TLS Scanners & Analyzers
+### SSL/TLS Scanners & Analyzers (Online)
Deep analysis of server TLS configurations, vulnerabilities, compliance, and client support.
@@ -24,6 +25,35 @@ Deep analysis of server TLS configurations, vulnerabilities, compliance, and cli
| Hardenize | [hardenize.com](https://www.hardenize.com/) | — | Comprehensive security testing including TLS, email, headers, DNS, and CT logs. | [hardening, scanner, tls, multi-protocol] | — | 2018 | — |
| TLScan | [github.com/prbinu/tlscan](https://github.com/prbinu/tlscan) | [prbinu/tlscan](https://github.com/prbinu/tlscan) | Pure Python tool to scan and enumerate SSL/TLS protocols and cipher suites. | [tls, scanner, python, enumerator] | 2022-08-15 | 2019 | ~50 |
+[↑ Back to Top](#ssltls--web-security-tools)
+
+
+
+
+CLI & Offline SSL/TLS Scanners, Clients & Certificate Tools
+
+### CLI & Offline SSL/TLS Scanners, Clients & Certificate Tools
+
+Local/command-line tools for scanning TLS configurations, testing cipher support, certificate management, local dev certs, chain building, and expiration monitoring.
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
+| openssl | [openssl.org](https://www.openssl.org/) | [openssl/openssl](https://github.com/openssl/openssl) | Robust, full-featured toolkit implementing the SSL/TLS protocols and utilities. | [tls, ssl, crypto, toolkit, c] | 2026 | 1998 | 25k+ |
+| gnutls-cli | [gnutls.org](https://gnutls.org/) | [gnutls/gnutls](https://github.com/gnutls/gnutls) | Command-line client to establish and test TLS connections to remote servers. | [tls, client, gnutls, testing] | 2026 | 2000 | 1.5k+ |
+| sslyze | — | [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) | Fast and comprehensive SSL/TLS server scanning library and CLI tool. | [tls, scanner, python, library] | 2026 | 2012 | 3.5k+ |
+| sslscan | — | [rbsec/sslscan](https://github.com/rbsec/sslscan) | Tests SSL/TLS services to report supported cipher suites and protocol versions. | [tls, scanner, cipher, c] | ~2025 | 2005 | 2k+ |
+| testssl.sh | — | [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) | Bash script to test TLS/SSL encryption on any port with detailed vulnerability checks. | [tls, scanner, bash, offline] | 2026 | 2014 | 8k+ |
+| cipherscan | — | [mozilla/cipherscan](https://github.com/mozilla/cipherscan) | Simple tool to discover supported SSL/TLS cipher suites on a target. | [tls, cipher, scanner, python] | ~2020 | 2015 | 1k+ |
+| spiped | [tarsnap.com/spiped.html](https://www.tarsnap.com/spiped.html) | — | Utility for creating symmetrically encrypted and authenticated network pipes. | [encryption, tunnel, pipe, c] | ~2023 | 2011 | — |
+| Certbot | [certbot.eff.org](https://certbot.eff.org/) | [certbot/certbot](https://github.com/certbot/certbot) | EFF tool to automatically obtain and renew Let's Encrypt certificates. | [certificate, letsencrypt, automation, python] | 2026 | 2015 | 30k+ |
+| mkcert | — | [FiloSottile/mkcert](https://github.com/FiloSottile/mkcert) | Zero-config tool to generate locally-trusted development certificates. | [certificate, dev, local, go] | 2026 | 2018 | 50k+ |
+| certstrap | — | [square/certstrap](https://github.com/square/certstrap) | Tools to bootstrap your own certificate authority and sign certificates. | [ca, certificate, bootstrap, go] | ~2021 | 2015 | 2k+ |
+| Sublert | — | [yassineaboukir/sublert](https://github.com/yassineaboukir/sublert) | Monitors certificate transparency logs for new subdomains of watched domains. | [subdomain, monitoring, ct, python] | ~2023 | 2020 | 1k+ |
+| mkchain | — | [trimstray/mkchain](https://github.com/trimstray/mkchain) | Tool to build and verify a valid SSL/TLS certificate chain from PEM files. | [certificate, chain, builder, bash] | ~2022 | 2018 | 500+ |
+| ssl-cert-check | — | [Matty9191/ssl-cert-check](https://github.com/Matty9191/ssl-cert-check) | Simple Nagios-compatible script to check SSL certificate expiration dates. | [certificate, expiration, monitoring, perl] | ~2020 | 2010 | 300+ |
+
+[↑ Back to Top](#ssltls--web-security-tools)
+
@@ -40,6 +70,8 @@ Tools to generate secure cipher suites, DH params, CAA records, and server confi
| dhtool | [2ton.com.au/dhtool](https://2ton.com.au/dhtool/) | — | Generates strong Diffie-Hellman parameters to improve forward secrecy. | [dhparam, pfs, tls, generator] | — | 2015 | — |
| CAA Record Helper | [sslmate.com/caa](https://sslmate.com/caa/) | — | Generates proper Certificate Authority Authorization (CAA) DNS records. | [caa, dns, generator, certificate] | — | 2017 | — |
+[↑ Back to Top](#ssltls--web-security-tools)
+
@@ -51,10 +83,12 @@ Search, monitor, and stream CT logs; CA databases.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
-| crt.sh | [crt.sh](https://crt.sh/) | [github.com/crt.sh](https://github.com/crtsh) | Search engine for certificates logged in public Certificate Transparency logs. | [ct, transparency, search, certificate] | — | 2015 | — |
+| crt.sh | [crt.sh](https://crt.sh/) | — | Search engine for certificates logged in public Certificate Transparency logs. | [ct, transparency, search, certificate] | — | 2015 | — |
| CERTSTREAM | [certstream.calidog.io](https://certstream.calidog.io/) | [Calidog/certstream](https://github.com/CaliDog/certstream) | Real-time streaming service for Certificate Transparency log updates. | [ct, transparency, stream, real-time] | 2025-11-20 | 2018 | ~400 |
| Common CA Database (CCADB) | [ccadb.my.salesforce-sites.com](https://ccadb.my.salesforce-sites.com/) | — | Repository of Certificate Authority information, roots, and intermediates. | [ca, certificate, database, root] | — | 2017 | — |
+[↑ Back to Top](#ssltls--web-security-tools)
+
@@ -70,6 +104,8 @@ Intentionally flawed setups, edge-case demos, and client compatibility testers.
| tlsfun.de | [tlsfun.de](https://tlsfun.de/) | — | Collection of live demos and tests for various TLS/SSL protocol edge cases. | [tls, demo, testing, protocol] | — | 2016 | — |
| Cipher suite compatibility | [ssllabs.com/ssltest/viewMyClient.html](https://www.ssllabs.com/ssltest/viewMyClient.html) | — | Tests TLS cipher and protocol compatibility from your current browser/client. | [tls, compatibility, client, browser] | — | 2011 | — |
+[↑ Back to Top](#ssltls--web-security-tools)
+
@@ -87,6 +123,8 @@ CSP analyzers, HSTS/CSP monitoring, adoption trackers, and security.txt.
| Why No HTTPS? | [whynohttps.com](https://www.whynohttps.com/) | — | Tracks top websites lacking automatic HTTP to HTTPS redirection. | [https, adoption, tracking, list] | — | 2018 | — |
| security.txt | [securitytxt.org](https://securitytxt.org/) | — | Standard and generator for security contact/policy disclosure on websites. | [securitytxt, policy, contact, standard] | — | 2017 | — |
+[↑ Back to Top](#ssltls--web-security-tools)
+
@@ -99,3 +137,7 @@ Cipher databases, TLS cipher search, and other utilities.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
| TLS Cipher Suite Search | [ciphersuite.info](https://ciphersuite.info/) | — | Searchable database of TLS cipher suites with security and support details. | [cipher, tls, search, database] | — | 2019 | — |
+
+[↑ Back to Top](#ssltls--web-security-tools)
+
+
\ No newline at end of file